PT-2018-3353 · Rsa+1 · Emc Rsa Bsafe Micro Edition Suite+4
Publicado
2018-08-31
·
Atualizado
2022-04-18
·
CVE-2018-11056
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
RSA BSAFE Micro Edition Suite versions prior to 4.1.6.1
RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3
Oracle Database Server (affected versions not specified)
Oracle Communications IP Service Activator (affected versions not specified)
Enterprise Manager Ops Center (affected versions not specified)
Description:
The issue is related to uncontrolled resource consumption, potentially leading to a denial of service. A remote attacker could exploit this by using maliciously constructed ASN.1 data to exhaust the stack.
Recommendations:
For RSA BSAFE Micro Edition Suite versions prior to 4.1.6.1, update to version 4.1.6.1 or later.
For RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3, update to version 4.0.5.3 or later.
For Oracle Database Server, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Oracle Communications IP Service Activator, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Enterprise Manager Ops Center, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Resource Exhaustion
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Enterprise Manager Ops Center
Oracle Communications Ip Service Activator
Oracle Database Server
Rsa Bsafe Crypto-C Micro Edition
Emc Rsa Bsafe Micro Edition Suite